# sonatype-2022-3346

## flame-vali - Malicious Package

Published Jun 7, 2022

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)  
[OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-3068.json)

**CVSS Score**: Critical  
**10.0**

## Security Details

### Components Impacted

**CVE ID**: sonatype-2022-3346  
**CWE**: N/A  
**CVE Description**: flame-vali - Malicious Package  
**Published**: Jun 7, 2022

### CVSS Score & Severity

**10.0** Critical  
**CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
**EPSS Score**: 0%

### Malware

malware

### KEV Status

Not in KEV Catalog: No known exploits

### Affected Ecosystems

affected

### Source

Sonatype

### References

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html) THIRD_PARTY  
[OSV](https://osv-vulnerabilities.storage.googleapis.com/npm/MAL-2022-3068.json) THIRD_PARTY